A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications,…
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.4453·Published 2019-10-03·Fixed in 1.2.18CWE-415